
$ rpki-client -vvf rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft
File: 8R8km4Id_MKxuXr05wUm3ZM6En0.mft (raw, json)
Hash identifier: cxf7rw11vI6Sqbc4+n21669oGddAGq62X/R7++/SBa8=
Subject key identifier: 7F:75:C0:27:90:AB:DC:26:36:82:2D:82:C2:20:32:6D:BC:F7:D6:F7
Authority key identifier: F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D
Certificate issuer: /CN=A911FF25/serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D
Certificate serial: 01D8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft
Manifest number: 01CE
Signing time: Thu 19 Feb 2026 02:20:49 +0000
Manifest this update: Thu 19 Feb 2026 02:20:49 +0000
Manifest next update: Thu 26 Feb 2026 02:20:49 +0000
Files and hashes: 1: 8R8km4Id_MKxuXr05wUm3ZM6En0.crl (hash: m32dJZ6wJfYfpDo5NGNhGm/wjubE4RYQHn/MUojR5BQ=)
2: B3677C08D2AA11F0850BC856C4F9AE02.roa (hash: k/lLY0AMn3sVt+u3zakrgiqTYvFE4y1vIBdfhQf434s=)
3: 3D870D1C685F11EEA29D9F4BC4F9AE02.roa (hash: HRtaeBIfXS4j0TAnrmFrjM5dZZkH7hynrpn4rWDNaLw=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl
rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 26 Feb 2026 02:20:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 472 (0x1d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A911FF25, serialNumber=F11F249B821DFCC2B1B97AF4E70526DD933A127D
Validity
Not Before: Feb 19 02:20:49 2026 GMT
Not After : Feb 26 02:20:49 2026 GMT
Subject: CN=69967381-de61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:99:fa:e8:39:db:20:3d:3a:8f:1d:8c:a6:b4:
87:0b:df:4b:77:fb:e5:e9:42:61:0c:dc:db:f1:58:
17:74:a7:f2:73:75:1a:f6:d9:e1:61:ae:3f:89:f2:
cc:1b:a9:61:ac:71:00:0e:54:df:1e:76:54:a1:5a:
1e:d1:3a:80:fb:09:fb:d9:d9:8f:c0:cd:d7:f4:ba:
25:03:1e:51:82:fe:fc:ee:f9:96:7e:72:0c:8b:80:
5a:26:2b:54:d1:4c:36:89:02:67:d1:53:ab:25:b6:
39:32:38:49:c0:9a:03:1a:f2:ac:cf:57:30:3d:86:
81:42:3b:6f:d3:c6:70:03:99:a6:b1:6f:9d:5d:e6:
24:1b:88:b7:76:76:58:b8:af:b2:b6:55:4c:78:3b:
fe:83:bd:4a:3a:59:5d:1c:d3:2f:af:e7:20:e6:78:
94:b7:87:b4:60:de:8d:75:a2:6c:9a:d6:c8:00:01:
f1:6c:d5:fd:4f:ad:49:01:42:56:2a:11:df:c4:05:
b8:5d:92:3d:bc:72:f0:58:75:b8:81:cb:43:f1:ce:
a9:7b:ab:66:09:14:b0:1f:9c:fb:8b:bd:dc:e6:84:
36:57:4e:3a:9f:4d:79:8d:a2:a0:10:9d:36:0f:02:
43:8a:c5:ab:18:fc:24:41:d8:81:eb:8d:61:f0:8c:
4f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:75:C0:27:90:AB:DC:26:36:82:2D:82:C2:20:32:6D:BC:F7:D6:F7
X509v3 Authority Key Identifier:
keyid:F1:1F:24:9B:82:1D:FC:C2:B1:B9:7A:F4:E7:05:26:DD:93:3A:12:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8R8km4Id_MKxuXr05wUm3ZM6En0.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FF25/6064BAB252F411EE898B9B43C4F9AE02/8R8km4Id_MKxuXr05wUm3ZM6En0.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
0e:2e:f4:d9:4c:db:a5:c1:ba:68:60:87:b6:2a:64:ba:15:6e:
88:e4:06:36:c4:c3:9d:64:e9:e8:8f:2e:33:58:b0:04:a3:ab:
35:78:ef:5f:a5:2d:10:6f:ac:d1:17:79:e8:c5:99:ac:b2:a9:
ee:06:25:c8:91:39:3d:d2:2d:f7:b7:01:e3:5c:ef:85:f3:b6:
10:51:85:c8:1d:ce:36:1a:b7:1d:3f:0f:11:cb:7b:69:5e:a1:
e7:76:0e:8b:11:ca:6a:e7:fd:da:8f:bd:4e:3a:3c:09:6c:a9:
33:ad:38:14:5c:82:e3:58:3a:e1:f4:25:38:30:64:8c:c2:af:
8d:5d:40:0f:49:8b:6d:a1:39:06:ec:84:fa:dc:dc:e5:a1:0a:
32:f3:69:5c:59:05:b4:5f:09:ef:44:a8:c9:b7:ad:f8:d8:ad:
47:71:59:5f:e0:16:15:14:f8:0d:4b:e8:3e:1e:ad:a6:9e:e6:
97:d5:2c:55:7a:fc:18:8c:de:e7:84:96:3c:35:7f:99:00:61:
e6:bb:08:d8:1c:e0:93:27:83:ad:b8:80:b6:c9:ec:ce:71:85:
8b:0c:b3:e2:00:a6:16:82:f2:15:3c:0f:eb:b2:f6:b6:bc:fc:
5a:db:b7:30:96:d2:bb:d1:e2:d8:a3:cb:6e:64:40:92:ba:91:
09:34:0b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 20 02:45:52 2026 by rpki-client